Let's Encrypt in OvenMediaEngine

[airensoft]

Let's Encrypt in OvenMediaEngine

[mpisat]

I can't get the latest version of OME work with LetsEncrypt. It always fails if I enable tls port for WS on port 3334

So, I put an nginx reverse websocket proxy on top of that with letsencrypt. It works flawlessly.

`server {

listen [::]:3334 ssl ipv6only=on; # managed by Certbot
listen 3334 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/domain.com/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/domain.com/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

location / {
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  proxy_set_header Host $host;

  proxy_pass http://domain.com:3333;

  proxy_ssl_certificate     /etc/letsencrypt/live/domain.com/fullchain.pem;
  proxy_ssl_certificate_key /etc/letsencrypt/live/domain.com/privkey.pem;

  proxy_http_version 1.1;
  proxy_set_header Upgrade $http_upgrade;
  proxy_set_header Connection "upgrade";
}

}`

[SangwonOh]

@enigmathion Hi. Please read this. https://airensoft.gitbook.io/ovenmediaengine/tls-encryption

And If you have further issues, please open the issue at https://github.com/AirenSoft/OvenMediaEngine/issues.

[SangwonOh]

Great job. It's helpful for us too. Thank. Whenever you want to use ssl via OvenMediaEngine, Please contact with OME team.

[enigmathion]

Could you tell me how to get there? [image: Mailtrack] <https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=signaturevirality5&> Remitente notificado con Mailtrack <https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=signaturevirality5&> 15/06/20 07:51:01 El sáb., 13 jun. 2020 a las 22:18, mpisat (<[email protected]>) escribió:

…

I can't get the latest version of OME work with LetsEncrypt. It always fails if I enable tls port for WS on port 3334 So, I put an nginx reverse websocket proxy on top of that with letsencrypt. It works flawlessly. `server { listen [::]:3334 ssl ipv6only=on; # managed by Certbot listen 3334 ssl; # managed by Certbot ssl_certificate /etc/letsencrypt/live/domain.com/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/domain.com/privkey.pem; # managed by Certbot include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot location / { proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Host $host; proxy_pass http://domain.com:3333; proxy_ssl_certificate /etc/letsencrypt/live/domain.com/fullchain.pem; proxy_ssl_certificate_key /etc/letsencrypt/live/domain.com/privkey.pem; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; } }` — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#126 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AKFT6BW3CONC3RFMP3HQTFDRWQQNXANCNFSM4N3I2XIA> .

-- *Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario,* *puede contener información privilegiada o confidencial y es para uso* *exclusivo de la persona o entidad de destino. Si no es usted. el* *destinatario indicado, queda notificado de que la lectura, utilización,* *divulgación y/o copia sin autorización puede estar prohibida en virtud de la* *legislación vigente. Si ha recibido este mensaje por error, le rogamos que* *nos lo comunique inmediatamente por esta misma vía y proceda a su* *destrucción.* *The information contained in this transmission is privileged and* *confidential information intended only for the use of the individual or* *entity named above. If the reader of this message is not the intended* *recipient, you are hereby notified that any dissemination, distribution or* *copying of this communication is strictly prohibited. If you have received* *this transmission in error, do not read it. Please immediately reply to the* *sender that you have received this communication in error and then delete* *it.* *Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinatário,* *pode conter informação privilegiada ou confidencial e é para uso exclusivo* *da pessoa ou entidade de destino. Se não é vossa senhoria o destinatário* *indicado, fica notificado de que a leitura, utilização, divulgação e/ou* *cópia sem autorização pode estar proibida em virtude da legislação vigente.* *Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique* *imediatamente por esta mesma via e proceda a sua destruição*